Free Cisco 300-440 Exam Dumps Questions & Answers

Refer to the exhibit. An engineer needs to configure a site-to-site IPsec VPN connection between an on-premises Cisco IOS XE router and Amazon Web Services (AWS). Which configuration command must be placed in the blank in the code to complete the tunnel configuration?

• A.tunnel source 20.20.20.21
• B.tunnel source 192.10.10.10
• C.address 20.20.20.21
• D.address 192.10.10.10

Refer to the exhibit.

Refer to the exhibits. An engineer troubleshoots a Cisco SD-WAN connectivity issue between an on-premises data center WAN Edge and a public cloud provider WAN Edge. The engineer discovers that BFD is Dapping on vEdge1. What is the problem?

• A.The control plane deleted the BFD session.
• B.The remote Edge device BFD is down.
• C.The remote Edge device has a duplicate IP address.
• D.The remote Edgedevice failed to respond BFD keepalives.

An engineer must configure a site-to-site IPsec VPN connection between an on-premises Cisco IOS XE router In Controller mode and AWS. The IKE version must be changed from IKEv1to IKEv2 in Cisco vManage.
Drag and drop the steps from the left onto the order on the right to complete the configuration.

Correct Answer:

Explanation:
Step 1 = Click Configuration, select Templates, and then select Feature Templates. Step 2 = Click Add Template, select the device, and then click Basic Configuration. Step 3 = Shut down the tunnel and then remove the ISAKMP profile. Step 4 = Attach the IKEv2 profile and then run the no shutdown command on the tunnel.
The process of configuring a site-to-site IPsec VPN connection between an on-premises Cisco IOS XE router in Controller mode and AWS, and changing the IKE version from IKEv1 to IKEv2 in Cisco vManage involves several steps123.
Click Configuration, select Templates, and then select Feature Templates: This is the first step where you navigate to the Templates section in the Configuration menu of Cisco vManage1.
Click Add Template, select the device, and then click Basic Configuration: In this step, you add a new template for the device and proceed with the basic configuration1.
Shut down the tunnel and then remove the ISAKMP profile: Before changing the IKE version, you need to shut down the existing tunnel and remove the ISAKMP profile that is configured for IKEv12.
Attach the IKEv2 profile and then run the no shutdown command on the tunnel: Finally, you attach the newly created IKEv2 profile to the tunnel and bring the tunnel back up2.
References :=
Configuring Internet Key Exchange Version 2 (IKEv2) - Cisco
Switch from IKEv1 to IKEv2 on Cisco Routers - Cisco Community
Configure IOS-XE Site-to-Site VPN Connection to Amazon Web Services - Cisco Community

Which architecture model establishes internet-based connectivity between on-premises networks and AWS cloud resources?

• A.That employs AWS Direct Connect for a dedicated network connection and uses private IP addresses tor secure communication.
• B.That establishes an iPsec VPN tunnel with Internet Key Exchange (IKE) for secure key negotiation and encrypted data transmission
• C.That uses Amazon CloudFrontfor caching and distributing content globally and uses HTTPS for secure data transfer.
• D.That relies on AWS Elastic Load Balancing (ELB) for traffic distribution and uses SSL/TLS encryption for secure data transmission.

Which feature is unique to Cisco SD-WAN IPsec tunnels compared to native IPsec VPN tunnels?

• A.authentication mechanisms
• B.tunneling protocols
• C.end-to-end encryption
• D.real-time dynamic path selection